Becontree Heath Flowers GDPR Privacy Policy

Introduction

At Becontree Heath Flowers, we are committed to protecting your personal data and upholding your rights under the UK General Data Protection Regulation (GDPR). This Privacy Policy explains how and why we collect, process, and store your personal information when you place an order with us either in Becontree Heath or the surrounding districts. By engaging with our floral services, you acknowledge that you have read and understood this policy.

Scope of This Policy

This Privacy Policy applies to all customers who place orders with Becontree Heath Flowers for delivery or collection within Becontree Heath and its surrounding areas. It covers our practices regarding the collection, processing, retention, and protection of your personal data.

Data We Collect

When you place an order with Becontree Heath Flowers, we may collect and process the following types of personal data:

• Identification data: Your full name and, if applicable, the recipient’s name.
• Contact information: Address (for billing and/or delivery), telephone number, and where necessary, other pertinent location or contact details.
• Order details: Purchase history, specific product or flower selections, preferred messages for bouquets, and delivery instructions.
• Payment information: Payment processing data (such as last four digits of the card, transaction reference number). We do not store complete card details for security reasons.
• Communication data: Any correspondence you send to us regarding orders, queries, or feedback.

Lawful Basis for Processing

We process your personal data based on the following lawful bases under the GDPR:

• Contractual necessity: We need your data to process and complete your order, arrange delivery, and provide aftersales care.
• Legitimate interests: We process certain data to improve our services, manage our business operations, and prevent fraud. We always balance our need with your privacy rights.
• Legal obligations: In some cases, we are required to retain or disclose information to comply with law, such as tax, accounting, or anti-fraud regulations.
• Consent: Where applicable, we will request your explicit consent to use your information for marketing communications. You can withdraw your consent at any time.

How We Use Your Data

Your information is used strictly for the purposes for which it was collected. This may include processing your order, arranging delivery, contacting you for order confirmation or queries, handling any complaints or feedback, complying with legal requirements, and, if you have agreed, sending you marketing communications about offers or events relevant to Becontree Heath Flowers.

Data Retention

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting obligations. Typically, standard order and customer data is retained for up to six years from the date of your last order, in accordance with UK accounting and taxation laws. After this period, your data will be securely deleted or anonymised unless we are required to retain it for longer due to ongoing legal or regulatory issues.

Processors and Third Parties

We use carefully selected third-party processors to assist in providing our services. These may include payment processors for secure transactions, delivery partners for order dispatch, IT service providers for data hosting and backup, and legal or accounting consultancies. Each processor is bound under contractual obligations to maintain the security and confidentiality of your personal data and to only act on our instructions.

We do not share your information with any third parties for their independent marketing purposes. All data transfers are performed in compliance with GDPR requirements, including ensuring appropriate safeguards if data is processed outside the United Kingdom.

Your Rights Under the GDPR

The GDPR grants you several rights relating to your personal information:

• Right to access: You can request details about the personal data we hold about you.
• Right to rectification: You can ask us to correct or complete inaccurate or incomplete information.
• Right to erasure: You can request the deletion of your personal data where there is no overriding legal basis for its continued processing.
• Right to restrict processing: You can ask us to suspend the processing of your data in certain circumstances.
• Right to data portability: You can request a copy of your data in a commonly used and machine-readable format.
• Right to object: You may object to our processing of your data when done on grounds of legitimate interests or direct marketing.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing previously undertaken.

Security of Your Data

We implement reasonable and appropriate security measures to protect your personal data from accidental loss, unauthorised access, disclosure, alteration, or destruction. This includes restricted access to information, physical security measures, regular staff training, and the use of secure, encrypted technology where applicable.

Making a Complaint

If you have any concerns about how we use your personal data, you are encouraged to contact us in writing so we can address your enquiry. Should you feel your concern is not resolved, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.

Policy Updates

We reserve the right to amend this Privacy Policy from time to time. Any changes will be reflected in this document with immediate effect. We encourage you to review it regularly so you are aware of how your information is handled and protected at Becontree Heath Flowers.